Actions
Bug #8214
closedHOME_NET includes all locally attached Networks
Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Suricata
Target version:
-
Start date:
12/16/2017
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
When selecting a passlist to define the HOME_NET the HOME_NET always contains the locally attached networks of all interfaces(except wan). Even if the Local Networks Add firewall Locally-Attached Networks to the list (excluding WAN). option is not checked in the passlist configuration. This is different as the expected behavior.
In a scenario where your want to protect a local network from other local networks you might consider only the network from the interface suricata is running on as HOME_NET and everything else EXTERNAL.
Updated by Bill Meeks over 7 years ago
This bug has been resoved in version 4.0.3 of the Suricata package which was moved to release January 12, 2018.
Bill
Actions